On Tue, Nov 14, 2017 at 8:26 AM, Julia Vitoria Cardoso <[email protected]> wrote: > Hi, i have a test setup with a windows agent and a server CentOS. > > I wrote a .bat to install agent and it seems ok, but looking at the logs it > only says > > 2017/11/14 11:14:27 ossec-agentd(4101): WARN: Waiting for server reply (not > started). Tried: 'serverhost.stuff'. > > 2017/11/14 11:15:05 ossec-agentd: INFO: Trying to connect to server > serverhost.stuff, port 1514. > > 2017/11/14 11:15:05 INFO: Connected to serverhost.stuff at address > 10.10.x.y:1514, port 1514 > > 2017/11/14 11:15:26 ossec-agentd(4101): WARN: Waiting for server reply (not > started). Tried: 'serverhost.stuff'. > > 2017/11/14 11:16:22 ossec-agentd: INFO: Trying to connect to server > serverhost.stuff, port 1514. > > 2017/11/14 11:16:22 INFO: Connected to serverhost.stuff at address > 10.10.x.y:1514, port 1514 > > 2017/11/14 11:16:43 ossec-agentd(4101): WARN: Waiting for server reply (not > started). Tried: 'serverhost.stuff'. > > 2017/11/14 11:17:57 ossec-agentd: INFO: Trying to connect to server > sep0265cb.sep.local, port 1514. > > 2017/11/14 11:17:57 INFO: Connected to serverhost.stuff at address > 10.10.x.y:1514, port 1514 > > It goes forever! It means it is working? May i change some value of time > between keep alive messages? >
Check on the ossec server to see if the agent is connected. `/var/ossec/bin/list_agents -c` > Also im receiving errors with agent.conf that i already saw in other posts. > > ERROR: Error reading XML file 'shared/agent.conf': XMLERR: File > 'shared/agent.conf' not found. (line 16). > Yeah, this message refuses to die. Ignore it. > Im convinved i have a connection issue or udp cache stuff. But cant figure > out. > > > All this together can be a connection issue? Or misconfiguration? > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
